CVE-2017-1000059

Live Helper Chat version 2.06v and older is vulnerable to Cross-Site Scripting in the HTTP Header handling resulting in the execution of any user provided Javascript code in the session of other users...

Design/Logic Flaw

Both global and Room chat are vulnerable to XSS attack in Apache OpenMeetings 3.2.0...

Cross site scripting

Live Helper Chat version 2.06v and older is vulnerable to Cross-Site Scripting in the HTTP Header handling resulting in the execution of any user provided Javascript code in the session of other users...

CVE-2017-7663

Both global and Room chat are vulnerable to XSS attack in Apache OpenMeetings 3.2.0...

CVE-2017-7663

CVE-2017-7663 corresponds to an XSS vulnerability in Apache OpenMeetings 3.2.0, affecting both global and Room chat. The issue is publicly described as a cross-site scripting flaw in the OpenMeetings 3.2.0 release, with remediation noted as a fix in version 3.3.0. The NVD entry lists CVSS scores ...

Zoho Chat - Team Communication - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Zoho Chat - Team Communication published at the 'play' market has multiple vulnerabilities...

Legal Robot: Intercom chat session information persists after logout

Hi team, While testing i look for session related issues but It seems that The Site is Will protected For such problems But a little Issue related to that i wanted to mention here... When A user Sign-In to his account he can see a Little chat button on Bottom right corner of the page After...

CVE-2017-1000059

Live Helper Chat version 2.06v and older is vulnerable to Cross-Site Scripting in the HTTP Header handling resulting in the execution of any user provided Javascript code in the session of other users...

CVE-2017-1000059

Live Helper Chat version 2.06v and older is affected by a Cross‑Site Scripting flaw in HTTP header handling, enabling execution of attacker-supplied JavaScript in another user’s session. Affected: Live Helper Chat; component: HTTP header processing; root cause: improper header data handling. Impa...

PT-2017-10764 · Rocket.Chat · Rocket.Chat

Name of the Vulnerable Software and Affected Versions: Rocket.Chat versions 0.8.0 and newer Description: The issue concerns an XSS vulnerability in the markdown link parsing code for messages. Recommendations: For Rocket.Chat versions 0.8.0 and newer, at the moment, there is no information about ...

Microsoft Exchange Server Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access OWA fails to properly handle web requests. An attacker who successfully exploited this vulnerability could perform script/content injection attacks and attempt to trick the user into disclosing sensitive...

SayHi Chat, Love, Meet, Dating - Customized SSL, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application SayHi Chat, Love, Meet, Dating published at the 'play' market has multiple vulnerabilities...

Zendesk Chat - Certificates or keys found, Customized SSL, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Zendesk Chat published at the 'play' market has multiple vulnerabilities...

Badoo - Free Chat & Dating App - Base64 encoded String, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Badoo - Free Chat & Dating App published at the 'play' market has multiple vulnerabilities...

EFS Software Easy Chat Server Password Reset Vulnerability

EFS Software Easy Chat Server is a simple Web-based chat program from EFS Software. A security vulnerability exists in the register.ghp file in EFS Software Easy Chat Server versions 2.0 through 3.1. A remote attacker can exploit this vulnerability by sending a specially crafted POST request to t...

EFS Software Easy Chat Server Heap Buffer Overflow Vulnerability

EFS Software Easy Chat Server is a simple Web-based chat program from EFS Software. A remote heap buffer overflow vulnerability exists in the register.ghp file in EFS Software Easy Chat Server versions 2.0 through 3.1. The vulnerability can be exploited by a remote attacker to execute arbitrary...

EFS Easy Chat Server Password Information Disclosure Vulnerability

Easy Chat Server is a live chat system. A password information disclosure vulnerability exists in EFS Easy Chat Server 'register.ghp'. A remote, unauthenticated attacker could send an HTTP GET request to obtain any Easy Chat Server user password...

Default credentials

register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to discover passwords by sending the username parameter in conjunction with an empty password parameter, and reading the HTML source code of the response...

CVE-2017-9557

register.ghp in EFS Software Easy Chat Server versions 2.0 to 3.1 allows remote attackers to discover passwords by sending the username parameter in conjunction with an empty password parameter, and reading the HTML source code of the response...

CVE-2017-9557

CVE-2017-9557 affects EFS Software Easy Chat Server (versions 2.0–3.1). The issue allows remote attackers to obtain user passwords by sending a crafted request containing the username parameter together with an empty password parameter, then reading the HTML source of the response. This is a info...